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TABLE I : Message Typ es 



Mnemonic 


DFS 
Sends? 


CS 
Sends? 


Priority 


Batching? 


Single 
mbuf? 


State 
Sharing? 


Expected 
Response 


Explanation 


QUERY 


Y 


N 


H 


N 


Y 


N 


REPLY 


Request from the DFS to the CSfor 
instructions on handling a new flow. 


APP_QUERY 


Y 


N 


H 


N 


N 


N 


REPLY 


QUERY message for a virtual server 
that is load balanced using application 
data. 


REPLY 


N 


Y 


H 


N 


Y 


Y 




Instructions provided by the CS to the 
DFS on handling the newflow. 


DELETE 


Y 


N 


H 


N 


Y 


Y 


- 


Notification Trom tne urototneuo 
that a flow was deleted due to 
inactivity, expired timer, TCP 
connection close or reset 


REAP 


N 


Y 


L 


Y 


N 


N 


STATS 


Notification from the CS totheDFSto 
delete a flow due to expired timer. 


STATS 


Y 


N 


L 


Y 


Y 


Y 




Statistics sent from the DFS to the 
CS, when the CS has requested a 
flow to be deleted. 


NEWFLOW 


N 


Y 


L 


N 


N 


Y 




Notification to the DFS fromtheCSto 
prepare to handle a new flow. 


RESET 


Y 


Y 


L 


N 


N 


Y 


ACK 
(CSMB) 


Delete all flews. 
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TABLE II: Message Fields 



Field 


Length 
(octets) 


Field Name 


Message Type (see Fig. 4) 


1 


msg_type 


Global Serial Number 


2 


senaLgbbal 


Serial Number in thistype 


2 


serial_bytype 


Original Source IP adotess 


4 


orig_srcJpaddr 


Original Source TCP orUDPport 


2 


orig_src_port 


Original Destination IPaddress 


4 


orig_dst_ipaddr 


Original Destination TCP orUDPport 


2 


orig_dst_port 


New Destination IP address 


4 


new_dst_ipaddr 


New Destination TCP orUDPport 


2 


new_dst_port 


Next Hop IP address 


4 


next_hop_ipaddr 


TCP Server Sequence Number Offset 


4 


svr_seq_offset 


TCP Server Acknowledgement Number Offset 


4 


svr_ack_offset 


TCP Client Sequence NumberOffset 


4 


client„seq_offset 


TCP Client Acknowledgement NumberOffeet 


4 


client_ack__offset 


Flags (see Fig. 




flags 


TCP Flags 


1 


tcp_flags 


Type of Service 


1 


tos 


Protocol 




pro to 


Error code 




error 


Application data length 


2 


app_datajen 


Application-specific data 


(varies) 


app„data 


DFS VendorlD 


4 


vendorjd 


Free test string 


(varies) 
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TABLE HI: Message Contents 





Fields 


Message Type 


orig„src_port 


orig_dst_ipaddr 


i 

/* 

I 


I 

~? 
I 


I 

i 

I 


new_dst_port 


next_hop_ipaddr 


svr_seq_ortset, 
svr_ack_offset, 
client_seq_offset 

client ack offset 


flags 


| 




pro to 


error 


app_data 


app„data_len 


QUERY 


Y 


Y 


Y 


Y 


N 


N 


N 


N 


N 


Y 


Y 


Y 


N 


N 


N 


APP_QUERY 


Y 


Y 


Y 


Y 


N 


N 


N 


N 


N 


Y 


Y 


Y 


N 


Y 


Y 


REPLY 


Y 


Y 


Y 


Y 


Y 


Y 


Y 


Y 


Y 


Y 


Y 


Y 


Y 


N 


N 


DELETE 


Y 


Y 


Y 


Y 


Y 


Y 


Y 


Y 


Y 


Y 


Y 


Y 


N 


N 


N 


REAP 


Y 


Y 


Y 


Y 


Y 


Y 


Y 


Y 


Y 


Y 


Y 


Y 


N 


N 


N 


STATS 


Y 


Y 


Y 


Y 


Y 


Y 


Y 


Y 


Y 


Y 


Y 


Y 


Y 


N 


N 


NEWFLOW 


Y 


Y 


Y 


Y 


Y 


Y 


Y 


Y 


Y 


Y 


Y 


Y 


N 


N 


N 


RESET 


N 


N 


N 


N 


N 


N 


N 


N 


N 


N 


N 


N 


N 


N 


N 
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Fla gs fi eld b o olean varia bles 



Vari able 


Explanation 


OUTBOUND 


If TRUE, then the message is regarding an outbound flow. If FALSE then the 
message is regarding an inbound flow. Most messages are inbound flows. 


ADD_TCP_OFFS ET 


If TRUE, then the values of the seq_offset and ack_offset fileds should be 
arithmetically added to the appropriate values in the TCP header of ever 
packet in the flow. This is typiclly used when the TCP handshake proxy is 
performed by the CS. IF FALSE, then those fields should be ignored. 


FIGURE 7 

Error codes for the enorfield 


Value 


Explanation 


UNKNOWN 


The CS deos not know how to handle the flow in the query. 


NOTAVAIL 


CS REPLY to QUERY message. The virtual server is not available due to port 
denied or maintenance mode. The flow is denied 


CONNUMIT 


CS REPLY to QUERY message. A user defined connection limittbr a virtual 
server would have been exceeded. The flow is denied. 


CONNALTVE 


DFS STATS reply to SSMB REAP message. The connection is still alive and 
should not be reaped on the CS. Statistics should be incremented on the CS. 
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pad® 
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TABLE IV ; Me ssag e Ty pes 



Mnemonic 


DFS 
Sends? 


CS 
Sends? 


Expected 
Response 


Explanation 


ADD_VS 


N 


Y 


- 


Add or modify a virtual server. 


DELETE.VS 


N 


Y 


- 


Delete virtual server. If the virtual 
server does not exist, the mesage is 
ignored. 


QUERY.VS 


Y 


Y 


VSJJST 


Send list of all virtual servas. 


VS_LIST 


Y 


Y 


- 


List of currently configured virtual 
servers. 


RESET 


Y 


Y 


- 


Delete all virtual servers. Typically 
sent by the CS when it initializes. 


STATUS 


Y 


Y 


STATUS 


Miscellaneous housekeeping 
functions 


HELLO 


Y 


Y 


ACK 


Miscellaneous housekeeping 
functions. 


ACK 


Y 


Y 




Miscellaneous housekeeping 
functions. 



FIGURE 10 



TAgUE V ; message Fields 



Field 


Length 
(octets) 


Fi eld Name 


Message Type (see Fig. 10) 


1 


msg_type 


Global Sena! Number 


2 


seriaLglobal 


Serial Number in friistype 


2 


serial_bytype 


Message Length (in bytes, including payioad 
data but not TCP or lower-layer headers) 


4 


msg_ length 


Major Version Number 


1 


vers_major 


Minor Version Number 


1 


vers_ minor 


Virtual IP address 


4 


virt_ipaddr 


Virtual TCP orUDPport 


2 


virt_port 


Protocol 


1 


pro to 


Virtual Server Class 


1 


vs„class 


Flags 


4 


flags 


Error Code 


1 


error 


SSMB IP address for actiusCS 


4 


ssmb_active ipaddr 


SSMB IP address for standby CS 


4 


ssmb_standby„ipaddr 


SSMB U DP port 


2 


ssmb_port 


Application configuration data 
(HTTP cookie name, etc.) 


(varies) 


app_data 


Application specific data length in bytes 


2 


app_datajen 


Free text stri ng 


(varies) 
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TABLE VI ; Mesggge Content? 



Message Type 


Fields 


< < 

ft 


virtjpaddr 


< 

s. 




vs_c!ass 




error 


pro to 


1 


i 

s 


w 

I 

l 

! 
I 


CO 

i 
t 

1 


ssmb_port 


auth_data 


1 

i 

Q. 

fl) 

/* 
f 


ADD_VS 


N 


Y 


Y 


Y 


Y 


Y 


N 


Y 


Y 


Y 


N 


N 


N 


N 


N 


DELETE_VS 


N 


Y 


Y 


Y 


N 


N 


N 


N 


N 


N 


N 


N 


N 


N 


N 


QUERYJ/S 


N 


Y 


Y 


Y 


N 


N 


N 


N 


N 


N 


N 


N 


N 


N 


N 


VSJJST 


N 


Y 


Y 


Y 


Y 


Y 


N 


Y 


Y 


Y 


N 


N 


N 


N 


N 


RESET 


N 


N 


Y 


N 


N 


N 


N 


N 


N 


N 


N 


N 


N 


N 


N 


STATUS 
































HEIXO 


Y 


N 


N 


N 


N 


Y 


N 


N 


N 


N 


Y 


Y 


Y 


N 


N 


ACK 
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Virtual Serve r Classes 



Value 


Explanation 


CS_ASSIST 


A CS-assisted virtual server. 


DFS_ASSIST 


A DFS-assisted virtual server. 
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Flags field b oolean variables 



Vari able 


Explanation 


TRANSLATE_ADDR 


If TRUE, then the CS will always supply a new destination IP addtesstbr 

oarh flnw If FAI QP fhon tho PlP^ chmilr! nnt trariQlat^ Qnurr^p nr rfpfr^inatinn 

CaUll MOW. II inLOC, Lllcll Ulc Uru OlIUUlU NUL LldlloldLC oUUiUC Ul UoLoll IctUUi 1 

IP addresses for any flow on this virtual server, and the DFS should always 
ignore the new_dst_ipaddr field of tha REPLY mesa ge from the CS. 


T RA NSLATE_PORT 


If TRUE, then the CS will always supply a new desitmationTCPorUDPport 
fnr eaph fln\w If PAI ^F- thpn thp DPS ^hmilH not tran^lafp ^niimpnr 

detsination ports for any flow on this virtual server, and the DFS should 
always ignore the new_dst„port field of tha REPLY mesage fromlheCS. 


ROUTE_BY_DST_IP 


If TRUE, then the DFS will perform a route lookup on the ds&riafcnlPadcfeess 
io cieiermine tne next nop rouie tot ine tiow. it rALoc, irion Lneurowiii use 
the next_hop_ipaddr field to determine the net hop ferine flow. 


REDUNDANT 


(HELLO message) If TRUE, then the there are two CSsandihe 

eemh etanHhw inoHHr uuill ho ncoH fnr ctafo charinn IF FA1 ^F thpn pithpr 
S5mu_&idnuuy_ipduur win uo uoou iui oldie biidiiny.. ir rrti_or_, li iui i giu ici 

the CS is not redundant or state sharing is not desired 


Wl LDCARD_ADDR 


If TRUE, then the virtjpaddr field is ignored and all trafficreceivedfromthe 

pYtprnnl network rtc»ctinpff fnr anv flririrp^^ whirh finp*? not mafnh another 

C7 A Lv^ Midi I 1 L VV KJ I i\ \JC70LlllW\i \\Jl 0 1 1 V ClUUtCOO VWIIiOII VJU^O IIVl lliaLvli (*l IUU ICI 

virtual server or other known local address is processed as if it was 
addressed to this virtual server. 


Wl LDC ARD_PORT 


If TRUE, then the virt_port field is ignored and all traffic destined for this 

v/irtiTol arlHrocc that rlneic nnt matrh annfhftr virtual nnrt rvf anv ntKturvirfi ial 
vil LUdl dUvJl coo li idt uuco i iul 1 1 laLisi i cti hjli ici vu luai l \ji cii ly vjli ta vn iucu 

server is processed as if it was addressed to this virtual server. 


NOARPJvODE 


If TRUE, then the controller acts like a router and accepts packets destined to 
tnis auaress dui ooes not respona io akk requests Tor n. it rALot, inenuie 
controller acts as a host and advertises the address (i.e. response to ARP 
requests). 


APP_PROXY 


(HELLO message) If TRUE, then the controller supports application data load 
balancing and can perform the TCP handshake proxy as well asextract 
application data from the client request. The CS allways sets thisflagtotrue. 
The DFS sets thus flag to true if it has sufficient capability. 


SSL_ PROXY 


If TRUE, the CS makes loaf balancing decisions for the virtual setverbased 

upon ine uiienio ool ocooion iu dnu ociiub il lultigoo. 


COOKIE_PROXY 


If TRUE, the CS makes load balancing decisions for the vitu a 1 server based 

UpUlI LIlc VdiUe Ul d LiUUMc III Llie nl Ir IcLjUcoL. 1 no UrO oTKJUKJ (JIUAy ulc 

client connection, extract the designated cookie, and send the cookie to the 
CS. The cookie name is provided in the app_data field. 


HTTP_PROXY 


If TRUE, the CS makes load balancing decisions for the virtual serverbased 
upon the value of the HTTP request. The DFS should proxy the doent 
connection, extract the HTTP request, and send the datatotheCS. 


RAW_PROXY 


If TRUE, the CS makes load balancing decision for the virtual serverbased 
upon the application data format that is not supported by the DFS. The DFS 
should proxy the client connection, and bridge packets that are r^ceivedfrom 
the client totheCS. 
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Error codes for the enrorfield 


Value 


Explanation 


VERS_NEW 


The version specified in the HELLO message is not yet sypportedbythis 
segment. The other segment should send another HELLO message with a 
lower version number, if possible. 


VERS_OBSOLETE 


The version specified in thr HELLO message is no longer supported by this 
segment. The other segment should send another HELLO messagewiiha 
higher version number, if possible. 
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